Feeds

UK teen is world's youngest certified ethical hacker (maybe)

Born to tinker

SANS - Survey on application security programs

For as long as he can remember, Shane Kelly has taken a keen interest in taking things apart. When he was 11 and his family took delivery of its first PC, he promptly pulled off the cover and disassembled it, much to the chagrin of his parents.

"They weren't too impressed at the time," Kelly, who is now 16, says. "But I put it back together. It worked."

A few months ago, the Solihull teenager successfully acquired an accreditation in Certified Ethical Hacking, making him possibly the youngest person to do so. While computers and networking have always captured his imagination, he says his interest in security prompted him to go for the hacking certification.

"That certainly stood out because it was the one qualification that focused not on the defensive side but it actually took you into the mind of the hacker," he says. "It was the mindset that gave me the motivation into taking the course."

Once upon a time, network security and penetration testing was a specialized field that was mainly inhabited by expensive outside consultants. Now that the net has become a core part of transacting business, more and more organizations are bringing these workers in-house.

"It's really come into its own as a legitimate area," says Terry Kurzynski, CEO of professional services firm Halock Security Labs, which also provides training for people seeking the credential. "We've been in security for 11 years and it really hasn't been until the last four or five years that ethical hacking has become a service."

It took Kelly about 10 months to complete the course work and pass the four-hour test required to get the accreditation. That included a five-day boot camp.

He recently landed a spot as a temporary worker at the Birmingham City University, where he expects to do IT-related work. He's considering acquiring additional accreditations for Cisco and Microsoft technologies.

But eventually, he says, he plans to do security work.

"Due to my age, it's probably not going to happen in the next five years," he says. "In the industry, you need to have a certain amount of experience. I hope to see myself doing security work of some some sort." ®

This story was updated to correct the name of the university where Kelly has landed a temp job.

Combat fraud and increase customer satisfaction

More from The Register

next story
Parent gabfest Mumsnet hit by SSL bug: My heart bleeds, grins hacker
Natter-board tells middle-class Britain to purée its passwords
Samsung Galaxy S5 fingerprint scanner hacked in just 4 DAYS
Sammy's newbie cooked slower than iPhone, also costs more to build
Obama allows NSA to exploit 0-days: report
If the spooks say they need it, they get it
Web data BLEEDOUT: Users to feel the pain as Heartbleed bug revealed
Vendors and ISPs have work to do updating firmware - if it's possible to fix this
Snowden-inspired crypto-email service Lavaboom launches
German service pays tribute to Lavabit
One year on: diplomatic fail as Chinese APT gangs get back to work
Mandiant says past 12 months shows Beijing won't call off its hackers
Call of Duty 'fragged using OpenSSL's Heartbleed exploit'
So it begins ... or maybe not, says one analyst
NSA denies it knew about and USED Heartbleed encryption flaw for TWO YEARS
Agency forgets it exists to protect communications, not just spy on them
prev story

Whitepapers

Designing a defence for mobile apps
In this whitepaper learn the various considerations for defending mobile applications; from the mobile application architecture itself to the myriad testing technologies needed to properly assess mobile applications risk.
3 Big data security analytics techniques
Applying these Big Data security analytics techniques can help you make your business safer by detecting attacks early, before significant damage is done.
Five 3D headsets to be won!
We were so impressed by the Durovis Dive headset we’ve asked the company to give some away to Reg readers.
The benefits of software based PBX
Why you should break free from your proprietary PBX and how to leverage your existing server hardware.
Securing web applications made simple and scalable
In this whitepaper learn how automated security testing can provide a simple and scalable way to protect your web applications.